Oracle Reports Developer Component 12.2.1.3 – Cross-site Scripting
from Exploit-DB.com RSS Feed http://bit.ly/2HhRaN2
via IFTTT
Tag Archives: Cybersecurity
New Year’s resolutions: Routing done right
As another thing to improve this year, you may want to route your focus on a device that is the nerve center of your network and, if poorly secured, the epicenter of much potential trouble
The post New Year’s resolutions: Routing done right appeared first on WeLiveSecurity
from WeLiveSecurity http://bit.ly/2W2ufIG
via IFTTT
Two charged with hacking company filings out of SEC’s EDGAR system
They’re charged with phishing and inflicting malware to get into the EDGAR filing system, stealing thousands of filings, and selling access.
from Naked Security http://bit.ly/2CqBjWI
via IFTTT
Largest collection of breached data ever seen is found
Store of 770m email addresses and passwords discovered after being posted to a hacking forum
The largest collection of breached data ever seen has been discovered, comprising of more than 770m email addresses and passwords posted to a popular hacking forum in mid-December.
The 87GB data dump was discovered by security researcher Troy Hunt, who runs the Have I Been Pwned breach-notification service. Hunt, who called the upload “Collection #1”, said it is probably “made up of many different individual data breaches from literally thousands of different sources”, rather than representing a single hack of a very large service.
from Data and computer security | The Guardian http://bit.ly/2RRtQJV
via IFTTT
I got a phishing email that tried to blackmail me – what should I do?
Pauline received a spam message that looked like a sextortion or webcam scam
I got this email today. It says “I hacked your device, because I sent you this message from your account.” It goes on to claim that it has filmed me watching pornography, and demands $698 in bitcoin. Phishing? Pwned? What to do? Pauline
This is generally known either as “webcam blackmail” or “sextortion scam” and the email should have been diverted to your spam folder. Millions – perhaps billions – of similar emails have been sent over the years, but there seems to have been a flood of them over the past few months.
from Data and computer security | The Guardian http://bit.ly/2QROqp6
via IFTTT
Malware Built to Hack Building Automation Systems
Researchers dig into vulnerabilities in popular building automation systems, devices.
from Dark Reading: https://ubm.io/2HdZ1v3
via IFTTT
Oklahoma Data Leak Compromises Years of FBI Data
The Oklahoma Securities Commission accidentally leaked 3 TB of information, including data on years of FBI investigations.
from Dark Reading: https://ubm.io/2SZ4qYf
via IFTTT
Fortnite Players at Risk Via Epic Games Vulnerability
Bugs in Epic Games’ platform could let intruders take over players’ accounts, view personal data, and/or buy in-game currency.
from Dark Reading: https://ubm.io/2SYhaOV
via IFTTT
How the US Chooses Which Zero-Day Vulnerabilities to Stockpile
When it comes to acceptable circumstances for government disclosure of zero-days, the new Vulnerabilities Equity Process might be the accountability practice security advocates have been waiting for.
from Dark Reading: https://ubm.io/2MdnNdu
via IFTTT
BEC Groups Ramp Up Payroll Diversion Attacks
Criminals are increasingly trying to defraud businesses by diverting payrolls of CEOs, other senior executives, Agari says.
from Dark Reading: https://ubm.io/2FDLOJn
via IFTTT
